Skip to main content

backend-development

Covers the fundamentals of backend development, including API design, database architecture, authentication, and security best practices.

Install this skill

or
72/100

Security score

The backend-development skill was audited on Feb 24, 2026 and we found 16 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 379

Template literal with variable interpolation in command context

SourceSKILL.md
379super(404, 'NOT_FOUND', `${resource} not found`)
medium line 429

Template literal with variable interpolation in command context

SourceSKILL.md
429const user = await db.query(`SELECT * FROM users WHERE id = ${userId}`)
medium line 106

Access to .env file

SourceSKILL.md
106- .envファイルの使い方
low line 270

Access to .env file

SourceSKILL.md
270process.env.JWT_SECRET!,
low line 278

Access to .env file

SourceSKILL.md
278return jwt.verify(token, process.env.JWT_SECRET!)
low line 446

Access to .env file

SourceSKILL.md
446origin: process.env.CLIENT_URL, // 本番環境では特定のドメインのみ
low line 42

External URL reference

SourceSKILL.md
42- **[REST API Design](https://restfulapi.net/)** - RESTful API設計ガイド
low line 43

External URL reference

SourceSKILL.md
43- **[GraphQL](https://graphql.org/learn/)** - GraphQL公式ドキュメント
low line 44

External URL reference

SourceSKILL.md
44- **[OWASP](https://owasp.org/)** - Webセキュリティ標準
low line 45

External URL reference

SourceSKILL.md
45- [OWASP Top 10](https://owasp.org/www-project-top-ten/) - 主要脆弱性
low line 46

External URL reference

SourceSKILL.md
46- [OWASP Cheat Sheet Series](https://cheatsheetseries.owasp.org/) - セキュリティ対策集
low line 50

External URL reference

SourceSKILL.md
50- **[Express.js](https://expressjs.com/)** - Node.js Webフレームワーク
low line 52

External URL reference

SourceSKILL.md
52- **[FastAPI](https://fastapi.tiangolo.com/)** - Python高速APIフレームワーク
low line 53

External URL reference

SourceSKILL.md
53- **[Django REST Framework](https://www.django-rest-framework.org/)** - Django API
low line 57

External URL reference

SourceSKILL.md
57- **[HTTP Status Codes](https://httpstatuses.com/)** - HTTPステータスコード一覧
low line 58

External URL reference

SourceSKILL.md
58- **[JWT.io](https://jwt.io/)** - JWT仕様・デバッガー
Scanned on Feb 24, 2026
View Security Dashboard